exploitDog

CVE-2018-18922

Опубликовано: 13 дек. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

Ссылки

https://0day.today/exploit/31658
Exploit
Third Party Advisory
https://hackpuntes.com/cve-2018-18922-ticketly-1-0-escalacion-de-privilegios-crear-cuenta-administrador/
Exploit
Third Party Advisory
https://medium.com/%40javierolmedo/cve-2018-18922-ticketly-1-0-privilege-escalation-add-admin-4d1b3696f367
https://www.exploit-db.com/exploits/45892
Exploit
Third Party Advisory
VDB Entry
https://0day.today/exploit/31658
Exploit
Third Party Advisory
https://hackpuntes.com/cve-2018-18922-ticketly-1-0-escalacion-de-privilegios-crear-cuenta-administrador/
Exploit
Third Party Advisory
https://medium.com/%40javierolmedo/cve-2018-18922-ticketly-1-0-privilege-escalation-add-admin-4d1b3696f367
https://www.exploit-db.com/exploits/45892
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:abisoftgt:ticketly:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03141

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-425

Связанные уязвимости

GHSA-8hcx-39v7-23mv

CVSS3: 9.8

github

больше 3 лет назад

add_user in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/add_user.php POST request.

EPSS

Процентиль: 86%

0.03141

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-425